allow lambda to interact with dynamodb tables

lbernhard95 · Oct 30, 2024 · 07ff7db · 07ff7db
1 parent 6841fb9
commit 07ff7db
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/infrastructure/lambda.tf b/infrastructure/lambda.tf
@@ -54,6 +54,28 @@ resource "aws_iam_policy" "schafkopf_scheduler" {
         Action = "logs:PutLogEvents"
         Resource = "*"
       },
+      {
+        "Effect": "Allow",
+        "Action": [
+            "dynamodb:BatchGetItem",
+            "dynamodb:DescribeTable",
+            "dynamodb:GetItem",
+            "dynamodb:Query",
+            "dynamodb:Scan"
+        ],
+        "Resource": [
+          aws_dynamodb_table.emails.arn,
+          aws_dynamodb_table.polls.arn
+        ]
+      },
+      {
+        "Effect": "Allow",
+        "Action": [
+            "dynamodb:PutItem",
+            "dynamodb:UpdateItem",
+        ],
+        "Resource": aws_dynamodb_table.polls.arn
+      }
     ]
   })
 }